Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/323830333a646538303a343030303a3a2f33382d3634203d3e203532343638.roa
File:                     323830333a646538303a343030303a3a2f33382d3634203d3e203532343638.roa (raw, json)
Hash identifier:          G03bbCyIDH/vZB5/o95UE4LxiesqLisNUfD8Yrl/lxc=
Subject key identifier:   1D:F1:2B:E6:EC:A3:58:D4:51:63:17:D9:30:01:9D:5D:C1:F1:1E:0D
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       10D560CDEAE470E32030FD3AA793CA9A914AC0BF
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/323830333a646538303a343030303a3a2f33382d3634203d3e203532343638.roa
Signing time:             Fri 04 Sep 2026 14:33:52 +0000
ROA not before:           Fri 04 Sep 2026 14:28:52 +0000
ROA not after:            Fri 03 Sep 2027 14:33:52 +0000
asID:                     52468
IP address blocks:        2803:de80:4000::/38 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Sep 2026 18:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d5:60:cd:ea:e4:70:e3:20:30:fd:3a:a7:93:ca:9a:91:4a:c0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: Sep  4 14:28:52 2026 GMT
            Not After : Sep  3 14:33:52 2027 GMT
        Subject: CN=1DF12BE6ECA358D4516317D930019D5DC1F11E0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:cb:fd:7e:a3:cd:fc:98:ef:fc:35:cf:3b:
                    a8:99:e8:b2:77:7c:39:1a:c6:5a:27:7b:5e:d7:bd:
                    c7:40:ef:3a:13:12:ef:05:1a:ee:40:ed:90:32:bf:
                    f5:09:8b:74:87:96:fe:75:fc:b8:7b:c2:50:19:64:
                    b0:52:f4:90:2a:14:cc:11:7d:22:66:ab:9e:c3:38:
                    97:bd:d7:85:61:ff:6a:35:5f:5b:c4:a7:54:ed:c6:
                    a1:ac:ec:70:1f:f9:47:e9:60:58:1c:e1:7c:bd:e3:
                    01:56:1c:4d:82:db:30:dd:6d:bb:c1:c1:17:39:c0:
                    8f:0b:54:06:7f:47:a4:ac:30:5f:2d:49:10:90:fe:
                    93:55:66:24:48:ad:b7:31:fc:ae:8f:98:de:c5:55:
                    37:53:f2:5d:95:67:43:81:75:87:8c:91:95:7d:2e:
                    8d:70:42:09:fb:a4:e9:d4:b5:a0:b9:33:68:09:49:
                    1e:df:ac:a4:2d:6d:bc:1c:0a:38:5e:9d:13:ed:3b:
                    a5:8d:10:db:6b:1d:90:b1:45:e6:25:dc:84:87:e5:
                    01:0c:40:19:f5:a3:ff:8c:1e:9d:da:b2:2c:1f:85:
                    a2:28:e1:e1:7f:c7:0b:f4:1a:c6:bf:31:57:4d:1d:
                    aa:94:20:a9:3d:05:64:20:f9:3f:36:bb:66:6a:2e:
                    2e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F1:2B:E6:EC:A3:58:D4:51:63:17:D9:30:01:9D:5D:C1:F1:1E:0D
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/323830333a646538303a343030303a3a2f33382d3634203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:de80:4000::/38

    Signature Algorithm: sha256WithRSAEncryption
         b4:b9:11:99:d5:b3:72:92:bc:82:bd:9e:d8:72:3f:9f:ad:ec:
         d8:5f:0f:b5:1b:83:d3:39:a6:28:93:51:40:c3:1a:61:44:43:
         bd:79:6d:90:29:42:e1:c0:d2:ad:ca:04:0c:70:15:1a:7d:11:
         70:d1:48:c3:76:9c:ed:76:d9:8a:58:4d:00:5e:09:7f:bc:e7:
         32:2a:6b:d8:c1:76:85:be:ee:2c:88:99:f1:21:58:82:41:8e:
         61:21:44:f5:18:f0:9f:ea:68:4d:13:ce:f1:5c:80:8c:2a:b0:
         cf:eb:6a:7f:83:66:44:ce:74:ef:b3:e7:77:83:ce:a4:dd:5c:
         b0:a3:c2:fa:90:d3:66:3f:00:72:ec:ed:c5:59:59:76:1f:4b:
         ac:d9:d4:4e:53:bc:c1:1e:6e:52:f8:c5:22:cf:18:c4:95:e3:
         7d:01:b8:56:4f:e2:48:0b:b7:da:c3:1f:c5:96:e5:9b:ea:d4:
         09:ae:7c:d5:f5:42:27:cd:15:0a:51:c0:54:6c:f1:5e:94:80:
         ec:68:16:eb:01:ce:a0:f7:b4:d1:62:52:c4:26:93:d4:5e:b8:
         cc:68:02:72:56:0d:65:e0:b7:02:7c:b1:a9:4b:15:bb:a0:8b:
         03:02:da:31:34:e3:85:25:fd:39:bc:05:c5:38:89:e1:5a:31:
         55:e4:70:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 01:58:43 2026 by rpki-client